Security update

This commit is contained in:
bergware
2023-02-10 20:28:27 +01:00
parent abd8968d44
commit 00dfc19c97

View File

@@ -47,8 +47,8 @@ case 'get':
echo shell_exec("$notify get");
break;
case 'hide':
$file = realpath($_POST['file']??'');
if (file_exists($file) && strpos($file,'/tmp/')===0 && pathinfo($file)['extension']=='notify') chmod($file,0000);
$file = $_POST['file']??'';
if (file_exists($file) && $file==realpath($file) && pathinfo($file)['extension']=='notify') chmod($file,0000);
break;
case 'archive':
$file = $_POST['file']??'';